CVE-2026-48089Published
DevGuard has improper authorization on public assets
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-48089 · Microsoft / collected KEV context
cve-program · CVE-2026-48089
- https://github.com/l3montree-dev/devguard/security/advisories/GHSA-6p54-fw2f-q7gf
- https://github.com/l3montree-dev/devguard/commit/1be88ec1309a5dc0566e35a23bdc4ea3ecd11417
euvd · EUVD-2026-38076
- https://github.com/l3montree-dev/devguard/security/advisories/GHSA-6p54-fw2f-q7gf
- https://github.com/l3montree-dev/devguard/commit/1be88ec1309a5dc0566e35a23bdc4ea3ecd11417
nvd · CVE-2026-48089
- https://github.com/l3montree-dev/devguard/commit/1be88ec1309a5dc0566e35a23bdc4ea3ecd11417
- https://github.com/l3montree-dev/devguard/security/advisories/GHSA-6p54-fw2f-q7gf
osv · GHSA-6p54-fw2f-q7gf
- https://github.com/l3montree-dev/devguard/security/advisories/GHSA-6p54-fw2f-q7gf
- https://nvd.nist.gov/vuln/detail/CVE-2026-48089
- https://github.com/l3montree-dev/devguard/commit/1be88ec1309a5dc0566e35a23bdc4ea3ecd11417
- https://github.com/l3montree-dev/devguard
osv · GO-2026-5183
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.